{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,9,2]],"date-time":"2026-09-02T15:01:25Z","timestamp":1788361285688,"version":"build-2803163510"},"reference-count":55,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","license":[{"start":{"date-parts":[[2025,1,1]],"date-time":"2025-01-01T00:00:00Z","timestamp":1735689600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2025,1,1]],"date-time":"2025-01-01T00:00:00Z","timestamp":1735689600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2025,1,1]],"date-time":"2025-01-01T00:00:00Z","timestamp":1735689600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"DOI":"10.13039\/501100012166","name":"National Key Research and Development Program of China","doi-asserted-by":"publisher","award":["2021YFB3100300"],"award-info":[{"award-number":["2021YFB3100300"]}],"id":[{"id":"10.13039\/501100012166","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62072395"],"award-info":[{"award-number":["62072395"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["U20A20178"],"award-info":[{"award-number":["U20A20178"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/100017366","name":"Key Research and Development Program of Zhejiang","doi-asserted-by":"publisher","award":["2024C01164"],"award-info":[{"award-number":["2024C01164"]}],"id":[{"id":"10.13039\/100017366","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans.Inform.Forensic Secur."],"published-print":{"date-parts":[[2025]]},"DOI":"10.1109\/tifs.2024.3492792","type":"journal-article","created":{"date-parts":[[2024,11,6]],"date-time":"2024-11-06T18:38:31Z","timestamp":1730918311000},"page":"191-206","source":"Crossref","is-referenced-by-count":15,"title":["PointNCBW: Toward Dataset Ownership Verification for Point Clouds via Negative Clean-Label Backdoor Watermark"],"prefix":"10.1109","volume":"20","author":[{"ORCID":"https:\/\/orcid.org\/0009-0008-5459-9676","authenticated-orcid":false,"given":"Cheng","family":"Wei","sequence":"first","affiliation":[{"name":"State Key Laboratory of Blockchain and Data Security, Zhejiang University, Hangzhou, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Yang","family":"Wang","sequence":"additional","affiliation":[{"name":"State Key Laboratory of Blockchain and Data Security, Zhejiang University, Hangzhou, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-5667-8238","authenticated-orcid":false,"given":"Kuofeng","family":"Gao","sequence":"additional","affiliation":[{"name":"Tsinghua Shenzhen International Graduate School, Tsinghua University, Shenzhen, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-3482-4975","authenticated-orcid":false,"given":"Shuo","family":"Shao","sequence":"additional","affiliation":[{"name":"State Key Laboratory of Blockchain and Data Security, Zhejiang University, Hangzhou, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-2258-265X","authenticated-orcid":false,"given":"Yiming","family":"Li","sequence":"additional","affiliation":[{"name":"State Key Laboratory of Blockchain and Data Security, Zhejiang University, Hangzhou, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-5804-3279","authenticated-orcid":false,"given":"Zhibo","family":"Wang","sequence":"additional","affiliation":[{"name":"State Key Laboratory of Blockchain and Data Security, Zhejiang University, Hangzhou, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-7872-6969","authenticated-orcid":false,"given":"Zhan","family":"Qin","sequence":"additional","affiliation":[{"name":"State Key Laboratory of Blockchain and Data Security, Zhejiang University, Hangzhou, China"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1145\/2976749.2978318"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1145\/3214303"},{"key":"ref3","first-page":"40","article-title":"Learning representations and generative models for 3D point clouds","volume-title":"Proc. ICML","author":"Achlioptas"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52733.2024.02288"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2024.3404885"},{"key":"ref6","article-title":"ShapeNet: An information-rich 3D model repository","author":"Chang","year":"2015","journal-title":"arXiv:1512.03012"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1109\/MSP.2020.2984780"},{"key":"ref8","article-title":"BERT: Pre-training of deep bidirectional transformers for language understanding","author":"Devlin","year":"2018","journal-title":"arXiv:1810.04805"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2018.00957"},{"key":"ref10","article-title":"Be careful with rotation: A uniform backdoor pattern for 3D shape","author":"Fan","year":"2022","journal-title":"arXiv:2211.16192"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2023.3346644"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2024.3402179"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1007\/s11042-019-08296-4"},{"key":"ref14","first-page":"172","article-title":"Backdoor attack on hash-based image retrieval via clean-label data poisoning","volume-title":"Proc. BMVC","author":"Gao"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2023.3333687"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52729.2023.00390"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1016\/j.patcog.2023.109512"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2019.2909068"},{"key":"ref19","first-page":"1","article-title":"Zeromark: Towards dataset ownership verification without disclosing watermarks","volume-title":"Proc. NeurIPS","author":"Guo"},{"key":"ref20","first-page":"54421","article-title":"Domain watermark: Effective and harmless dataset copyright protection is closed at hand","volume-title":"Proc. NeurIPS","author":"Guo"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v37i1.25154"},{"key":"ref22","first-page":"1","article-title":"Unlearnable examples: Making personal data unexploitable","volume-title":"Proc. ICLR","author":"Huang"},{"key":"ref23","article-title":"Adam: A method for stochastic optimization","author":"Kingma","year":"2014","journal-title":"arXiv:1412.6980"},{"key":"ref24","first-page":"1","article-title":"ImageNet classification with deep convolutional neural networks","volume-title":"Proc. NeurIPS","author":"Krizhevsky"},{"key":"ref25","volume-title":"An Introduction to Mathematical Statistics","author":"Larsen","year":"2005"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV48922.2021.01618"},{"key":"ref27","first-page":"1","article-title":"PointCNN: Convolution on X-transformed points","volume-title":"Proc. NeurIPS","author":"Li"},{"key":"ref28","first-page":"13238","article-title":"Untargeted backdoor watermark: Towards harmless and stealthy dataset copyright protection","volume-title":"Proc. NeurIPS","author":"Li"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1109\/TNNLS.2022.3182979"},{"key":"ref30","first-page":"1","article-title":"Few-shot backdoor attacks on visual object tracking","volume-title":"Proc. ICLR","author":"Li"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2023.3265535"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV48922.2021.01615"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1109\/TCE.2022.3141093"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1109\/ICIP.2019.8803770"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1109\/TIP.2023.3251021"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2019.00100"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2017.16"},{"key":"ref38","first-page":"1","article-title":"PointNet++: Deep hierarchical feature learning on point sets in a metric space","volume-title":"Proc. NeurIPS","author":"Qi"},{"key":"ref39","first-page":"1","article-title":"Revisiting the assumption of latent separability for backdoor defenses","volume-title":"Proc. ICLR","author":"Qi"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1002\/0471725382"},{"key":"ref41","first-page":"1","article-title":"Explanation as a watermark: Towards harmless and multi-bit model ownership verification via watermarking feature attribution","volume-title":"Proc. NDSS","author":"Shao"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1145\/3606274.3606279"},{"key":"ref43","article-title":"Label-consistent backdoor attacks","author":"Turner","year":"2019","journal-title":"arXiv:1912.02771"},{"issue":"11","key":"ref44","first-page":"1","article-title":"Visualizing data using t-SNE","volume":"9","author":"Van der Maaten","year":"2008","journal-title":"J. Mach. Learn. Res."},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1145\/3326362"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2015.7298801"},{"key":"ref47","first-page":"1","article-title":"BadChain: Backdoor chain-of-thought prompting for large language models","volume-title":"Proc. ICLR","author":"Xiang"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV48922.2021.00750"},{"key":"ref49","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR42600.2020.00563"},{"key":"ref50","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52733.2024.02306"},{"key":"ref51","doi-asserted-by":"publisher","DOI":"10.1109\/ICASSP39728.2021.9413468"},{"key":"ref52","doi-asserted-by":"publisher","DOI":"10.1109\/TVCG.2020.3027069"},{"key":"ref53","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV48922.2021.01595"},{"key":"ref54","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR42600.2020.00128"},{"key":"ref55","doi-asserted-by":"publisher","DOI":"10.1109\/JPROC.2020.3004555"}],"container-title":["IEEE Transactions on Information Forensics and Security"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/10206\/10810755\/10745757.pdf?arnumber=10745757","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,1,15]],"date-time":"2025-01-15T19:39:09Z","timestamp":1736969949000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/10745757\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025]]},"references-count":55,"URL":"https:\/\/doi.org\/10.1109\/tifs.2024.3492792","relation":{},"ISSN":["1556-6013","1556-6021"],"issn-type":[{"value":"1556-6013","type":"print"},{"value":"1556-6021","type":"electronic"}],"subject":[],"published":{"date-parts":[[2025]]}}}